Defense-GAN [1]} is a novel defense mechanism that purifies the input into its closest GAN reconstruction. Similar idea is adopted by PixelDefend [2]}, wherein a learned PixelCNN model is used to purify the inputs.
